Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/0Rx7VkMFwienSOgoWnQSo3FXTH4.roa
File: 0Rx7VkMFwienSOgoWnQSo3FXTH4.roa (raw, json)
Hash identifier: bX46MTviqFpdzpx/kINqQjPdm6sxe/j6nWTT1FwZLx8=
Subject key identifier: D1:1C:7B:56:43:05:C2:27:A7:48:E8:28:5A:74:12:A3:71:57:4C:7E
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 018CC64B79C26962EB0347D303EE4B60CB07
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/0Rx7VkMFwienSOgoWnQSo3FXTH4.roa
Signing time: Mon 01 Jan 2024 18:31:24 +0000
ROA not before: Mon 01 Jan 2024 18:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42424
IP address blocks: 194.126.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:79:c2:69:62:eb:03:47:d3:03:ee:4b:60:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jan 1 18:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d11c7b564305c227a748e8285a7412a371574c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:3e:9d:41:a1:bb:ff:59:7f:f1:0f:6c:fe:
63:dc:d4:0f:b0:6d:a9:cc:a7:22:6a:25:76:cf:16:
29:db:03:15:25:1f:26:0e:88:6a:d4:40:e2:97:e8:
78:9f:3e:26:6d:36:f7:1c:b9:11:3d:a4:8c:6a:08:
50:42:b0:e3:2a:3a:6c:80:2a:e3:42:36:b9:f8:dc:
df:de:17:bc:07:ed:8a:8d:64:5d:bb:9a:74:fe:47:
88:78:ff:72:c0:c1:df:26:fd:0b:d7:5a:50:db:a8:
df:13:5b:3b:ca:6d:70:ba:e6:f2:0c:4d:26:f3:0a:
b8:9a:9a:c2:10:26:17:c5:6f:0e:e9:99:ba:9b:ae:
5b:e2:5f:22:81:18:8d:23:55:f4:ac:8e:c6:4b:d3:
fe:ff:dd:b5:29:4a:59:d5:6c:31:ed:f8:3d:64:fa:
81:5c:84:ab:d3:cd:21:3d:c0:d2:c9:80:dd:c2:f3:
57:09:79:b0:14:b7:52:1e:27:4b:f0:6a:50:b9:e1:
0a:c5:21:ac:4b:83:f9:0b:3a:b7:18:fe:be:ea:8f:
f0:90:a6:aa:c5:23:a9:9e:a0:68:3e:dd:f5:3b:cc:
82:0f:40:ae:46:df:74:a6:ec:52:e5:d0:69:1f:20:
52:2e:49:d5:33:35:66:de:f0:52:9b:db:98:31:a4:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:7B:56:43:05:C2:27:A7:48:E8:28:5A:74:12:A3:71:57:4C:7E
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/0Rx7VkMFwienSOgoWnQSo3FXTH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.146.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:41:78:34:7d:7f:4d:2b:f1:94:3a:aa:a3:3c:42:5a:e0:
9a:e2:9d:25:8d:ea:e0:79:47:43:20:a0:8f:42:3f:d1:4b:7e:
62:cc:1c:d3:bd:85:06:1e:fb:c6:fb:1e:75:0a:63:41:ab:59:
72:4a:1d:5b:49:1b:6c:d4:3d:f8:c3:bd:19:8c:45:3a:3f:e9:
1e:1f:bf:d0:77:e8:04:10:5e:7d:4f:53:07:ea:c2:06:7e:91:
49:50:d6:89:61:fb:8e:39:ca:f7:a0:08:aa:71:05:e2:d1:a6:
87:c0:5d:f3:25:4f:ca:6e:6b:37:f1:85:24:84:a9:ea:9b:df:
eb:b0:29:4d:2f:ce:e0:41:9c:df:96:c6:da:df:f9:4e:96:4c:
2d:ec:c7:bc:99:0d:c3:f5:02:a5:99:f4:d2:b8:1d:46:9d:2e:
28:e3:c7:0c:e9:bd:92:ed:5a:e5:a2:b7:7c:86:a4:63:99:f5:
89:ab:4a:f2:0b:5e:ff:a4:50:42:3b:d0:b2:47:67:6e:cf:3e:
c8:00:57:24:48:9c:de:db:68:5f:5c:ea:4b:53:a7:63:a1:d8:
ef:b3:e0:ed:80:03:58:dd:fd:ed:f5:aa:46:e6:aa:52:35:fa:
81:8a:51:b7:68:34:25:8b:01:df:e7:5f:74:09:06:f6:ec:ae:
03:59:81:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS3nCaWLrA0fTA+5LYMsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh
MTJkODMwHhcNMjQwMTAxMTgzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTFjN2I1NjQzMDVjMjI3YTc0OGU4Mjg1YTc0MTJhMzcxNTc0YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8M+nUGhu/9Zf/EPbP5j3NQPsG2p
zKciaiV2zxYp2wMVJR8mDohq1EDil+h4nz4mbTb3HLkRPaSMaghQQrDjKjpsgCrj
Qja5+Nzf3he8B+2KjWRdu5p0/keIeP9ywMHfJv0L11pQ26jfE1s7ym1wuubyDE0m
8wq4mprCECYXxW8O6Zm6m65b4l8igRiNI1X0rI7GS9P+/921KUpZ1Wwx7fg9ZPqB
XISr080hPcDSyYDdwvNXCXmwFLdSHidL8GpQueEKxSGsS4P5Czq3GP6+6o/wkKaq
xSOpnqBoPt31O8yCD0CuRt90puxS5dBpHyBSLknVMzVm3vBSm9uYMaTv7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEce1ZDBcInp0joKFp0EqNxV0x+MB8GA1UdIwQY
MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt
Mzc2MjRmNmE1MzExLzEvMFJ4N1ZrTUZ3aWVuU09nb1duUVNvM0ZYVEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx
LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn6SMA0G
CSqGSIb3DQEBCwUAA4IBAQAg2kF4NH1/TSvxlDqqozxCWuCa4p0ljergeUdDIKCP
Qj/RS35izBzTvYUGHvvG+x51CmNBq1lySh1bSRts1D34w70ZjEU6P+keH7/Qd+gE
EF59T1MH6sIGfpFJUNaJYfuOOcr3oAiqcQXi0aaHwF3zJU/Kbms38YUkhKnqm9/r
sClNL87gQZzflsba3/lOlkwt7Me8mQ3D9QKlmfTSuB1GnS4o48cM6b2S7Vrlord8
hqRjmfWJq0ryC17/pFBCO9CyR2duzz7IAFckSJze22hfXOpLU6djodjvs+DtgANY
3f3t9apG5qpSNfqBilG3aDQliwHf5190CQb27K4DWYGo
-----END CERTIFICATE-----
Generated at Tue May 21 02:16:22 2024 by rpki-client on console-fra.rpki-client.org